Function Level Authorization Flaw in Centreon Leads to Unauthorized Command Executions
CVE-2025-13050

5.4MEDIUM

Key Information:

Vendor

Centreon

Status
Vendor
CVE Published:
29 October 2026

What is CVE-2025-13050?

A vulnerability within the Centreon product has been identified, where broken function level authorization may allow authenticated users to execute post-restart commands, potentially resulting in unauthorized access and control over critical operations. This flaw underscores the importance of proper authorization checks to prevent exploitation by malicious actors.

Affected Version(s)

Centreon 25.10

Centreon 24.10

Centreon 24.04

References

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Stéphane CHAPRON
.